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PSEUDO-RANDOM NUMBER GENERATOR 

3 

4 BACKGROUND OF THE INVENTION 

5 

6 1 . Field of the Invention 
7 

8 The present invention relates generally to a method of and apparatus for generating 

9 pseudo-random numbers. 
10 

11 2. Description of the Prior Art 
12 

1 3 Pseudo-random numbers are used for a variety of purposes including simulation studies, 

14 information processing, communication, and encryption. Pseudo-random number 

1 5 generators create sequences of values that appear to have been generated by random 

1 6 processes even though the sequences are not truly random. The results of a pseudo- 

1 7 random number process should be adequately distributed across the desired range of 

1 8 possible numbers so as to mimic the results that might have come from a truly random 

19 process. Pseudo-random results should not exhibit discernable patterns or other 

20 observable relationships between the observable output values that would make 

2 1 prediction or other analysis of the observable output sequence possible. 
22 

23 The search for pseudo-random number generators that satisfy the above conditions has 

24 yielded a number of interesting and useful processes. The linear feedback shift register 

25 (LFSR) process is easy to implement and has been widely used but has an inherent 

26 weakness due to the strict linearity of its processes. Another widely used generator is the 

27 classical linear congruential generator (LCG), represented as x n = (ax n -i + b) mod m, 

28 where x is the output series, x 0 is the seed value, and a, b, and m are constants. For 

29 example, the LCG process is the framework used by DeVane in the high-speed pseudo- 

30 random number generator of U.S. Patent #5,187,676, by Finkelstein in the encryption 

31 protection in a communication system of U.S. Patent #6,014,446, by Tiedemann et al in 
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1 the system for testing a digital communication channel of U.S. Patent #5,802, 1 05, by 

2 Ridenour in the high precision pseudo-random number generator of U.S. Patent 

3 #5,541 ,996, and by Shimada in the pseudo-random number generator of U.S. Patent 

4 #6,097,8 15. LCG-based systems can generate well mixed numbers and will pass certain 

5 statistical tests, although the sequence generated by an LCG typically can be inferred 

6 even if the constant parameters a, b, m and the seed x 0 are all unknown. 
7 

8 The multiple recursive generator (MRG) is similar to an LCG but extends the range of 

9 the recursion from the immediately preceding output value to more distantly produced 

1 0 ones. The MRG process can be represented as x„=(aix„.i + ... + a k x n -k) mod m, where ai 

11 ... a k and m are constants. Lagged Fibonacci generators and some combined generators 

1 2 are essentially MRGs. The LCG process also has been extended to additional 

1 3 dimensions to create a matrix method (MM) process represented as X n = (AX„-i) mod m 

1 4 where X is a vector of output values and A is a constant transition matrix. Niederreiter 

1 5 introduced the multiple-recursive matrix method (MRMM) as a framework for 

1 6 encompassing essentially all of the linear methods described above as well as several 

1 7 others such as the Generalized Feedback Shift Register (GFSR) and the "twisted" GFSR. 

1 8 A good example of the twisted GFSR is the recently developed Mersenne Twister 

1 9 described by Matsumoto and Nishimura. The general form of the MRMM process is X n 

20 = (AiXn.i + ... + A k X n -k) mod m, where Ai ... A k and m are constants. 
21 

22 In these conventional systems, the modulus operator is typically chosen to be a fixed 

23 number, which may be determined by the hardware constraints of the computer systems 

24 to be used. Often, the word length is a critical factor; for instance, 2 32 is typically chosen 

25 as the modulus value for 32-bit computer systems. Using a fixed modulus simplifies the 

26 determination of the output range of pseudo-random number generator. A fixed modulus 

27 of 2 32 , for example, creates a range of actual output values from 0 to 2 32 - 1 . Others, such 

28 as Shimada, have suggested varying the modulus operator by using a set of prime 

29 numbers (see U.S. Patent #6,097,815). Shimada uses a three-part expanded affine 

30 transformation to inflate the intermediate results of the variable modulus operation to the 
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1 magnitude of the desired range, although only a portion of each resulting value is kept 

2 because the unaltered series is linear and therefore predictable in nature. 
3 

4 Many of the existing pseudo-random number generators are computationally efficient and 

5 generate well-distributed results. However, the recursive nature of the processes create 

6 output results that exhibit strong linear correlation; this structure tends to make those 

7 results exhibit characteristics which can be exploited to create predictions of future output 

8 values. Predictability of the series may not be a problem for some applications, but still 

9 indicates that the series is not as "random" for general applications as might be desired. 
10 

1 1 The invention described herein presents a general-purpose pseudo-random number 

1 2 generator that offers output sequences with very long periods and very low predictability. 

13 
14 

1 5 SUMMARY AND OBJECTS OF THE INVENTION 
16 

1 7 A primary object of the present invention is to provide a method and process for 

1 8 generating pseudo-random numbers with very long period output sequences, well- 

1 9 distributed actual output values, and very low predictability for general-purpose use. 
20 

2 1 Another object of the present invention is to introduce variable recursive matrix 

22 operations into the pseudo-random number generator process where the transition 

23 matrices are changed from one iteration of the generator to the next. The variations in the 

24 transition matrices are determined by secondary pseudo-random number generators or 

25 other processes where the secondary pseudo-random number generators or other 

26 processes exhibit long cycles. 
27 

28 Another object of the present invention is to introduce variable recursive matrix 

29 operations into the pseudo-random number generator process where the augmentation 

30 matrices are changed from one iteration of the generator to the next. The variations in the 

3 1 augmentation matrices are determined by secondary pseudo-random number generators 
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1 or other processes where the secondary pseudo-random number generators or other 

2 processes exhibit long cycles. 
3 

4 Another object of the present invention is to introduce variable recursive matrix 

5 operations into the pseudo-random number generator process where the modulus 

6 operators are changed from one iteration of the generator to the next. The variations in 

7 the modulus operators are determined by secondary pseudo-random number generators or 

8 other processes where the secondary pseudo-random number generators or other 

9 processes exhibit long cycles. 
10 

1 1 Another object of the present invention is to introduce a process for the use of multiple 

1 2 modulus operators where the results are equally distributed across the range of actual 

1 3 output values associated with the final modulus operator. 
14 

1 5 Another object of the present invention is to introduce the development of processes such 

1 6 that the output matrix can be created in such a way as to be non-invertible, that is, having 

1 7 no calculable inverse. The variable recursive matrix operations can be used to create 

1 8 output sets that cannot be inverted making it impossible to determine constituent 

1 9 components of the matrix operations simply from analysis of the observable output 

20 results. 
21 

22 These objects are achieved by introducing a new type of pseudo-random number 

23 generators that significantly extend the current state of the art. The multiple-recursive 

24 matrix method (MRMM) framework that encompassed essentially all prior linear 

25 methods is extended by this invention through the introduction of variable parameters. 

26 The class of pseudo-random generators of the invention can be denoted as multiple 

27 variable recursive matrix (MVRM) generators. As described in the following sections, 

28 the new class of MVRM pseudo-random number generators of this invention is well 

29 suited to general-purpose applications. 
30 
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1 The need exists for pseudo-random number generators that offer results with more 

2 random-like characteristics. The precise definition of "more random-like" is difficult to 

3 specify, at best. This is especially true for pseudo-random number generators that are 

4 purely deterministic, that is, those which can replicate the same output results exactly 

5 given the same state of characteristics and input values for the generating process. 

6 Essentially all of the widely used linear methods described above are deterministic 

7 processes. The level of predictability is a reasonable indicator of the "randomness" of the 

8 pseudo-random number generator. While the methods and processes of the invention 

9 claimed herein are deterministic, the results are generally less predictable and more 
1 0 "random" than those of other types of pseudo-random number generators. 

11 

1 2 Computational efficiency has often been a key determinant in the design of pseudo- 

1 3 random number generators. However, computational power has increased dramatically 

1 4 over the past years, making possible the introduction of pseudo-random number 

1 5 generators that exchange reduced computational efficiency for increased "randomness". 

1 6 The pseudo-random number generators of the claimed invention offer just such a 

1 7 compromise. Even so, depending on the specific implementation of the processes of the 

1 8 invention, the decrease in computational efficiency may be relatively slight while the 

1 9 gain in "randomness" may be substantial. 
20 

2 1 Pseudo-random number generators of the multiple-recursive matrix method (MRMM) 

22 take the general form of X n = (AiX n ., + ... + A k X n -k) mod m, where Ai ... A k and m are 

23 constants and X n -i ... X n . k are the previous results of the process. The multiple variable 

24 recursive matrix (MVRM) pseudo-random number generators of the claimed invention 

25 take the general form of X n = ((A,, n X n .i + ... + A M X n . k + B,, n + ... + B j>n ) mod m,,„) ... 

26 mod mj n , where: 

27 Ai,„ ... A k>n , Bi, n ... B j>n , and mi >n ... m i>n are variable transition, augmentation and 

28 modulus parameters for the n* candidate output element of the matrix X, 

29 the transition matrices Ai,„ ... A M are created by secondary pseudo-random 

30 number generators or other processes, 
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1 the augmentation matrices B i >n . . . B j>n are created by secondary pseudo-random 

2 number generators or other processes, and 

3 the modulus operators mi,„ ... m iin are created by secondary pseudo-random 

4 number generators or other processes. 
5 

6 The form of the processes is unchanged if the transition matrices A i >n . • • A k , n are 

7 postmultiplied in the equation above instead of premultiplied as in the form shown. 
8 

9 In the MVRM process of the invention, the matrix of candidate output values X n can be a 

1 0 matrix of any number of dimensions and sizes including columnar or row vector form. 

1 1 The matrix will have a number of elements determined by the number of rows times the 

1 2 number of columns. The specific entries from the total elements contained in the matrix 

13 X n to be used as the pseudo-random number generator candidate output values could be 

1 4 single elements from specific locations of the matrix or all the values of the entire matrix. 

1 5 The dimensions of the candidate output matrix will determine the dimensions of the 

1 6 transition matrices and of the augmentation matrices. The transition matrices will be 

1 7 square matrices with row and column dimensions equal to the number of rows in the 

1 8 candidate output matrix. The augmentation matrices will have the same dimensions as 

1 9 the candidate output matrix. 
20 

2 1 The candidate output matrix X n also can be created in such a way as to be non-invertible, 

22 that is, having no calculable inverse. This is a significant and distinguishing difference 

23 from the classic LCG pseudo-random number generators because the additive and 

24 multiplicative components of the LCG methods are always invertible, meaning that the 

25 LCG's observed output results are always invertible. Matrix and other similar data 

26 arrangements can be used to create output sets that cannot be inverted, making it 

27 impossible to determine constituent components of the matrix operations simply from 

28 analysis of the observed output results. 
29 

30 The multiple variable recursive matrix (MVRM) pseudo-random number generator 

31 process of the claimed invention has the form of X n = ((Ai, n X n -i + ... + A kjn X n -k + Bi >n + ... 
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1 + B j>n ) mod mi, n ) ... mod m i;n , that is, the n th value of the candidate output matrix is 

2 created by summing the multiple of the n-l th value of the candidate output matrix by the 

3 n th value of the transition matrix Ai (either premultiplied or postmultiplied) with all 

4 subsequent multiples through the multiple of the n-k 1 " 1 value of the candidate output 

5 matrix by the n th value of the transition matrix A k and the 1 st through the j th values of the 

6 augmentation matrices B n . The 1 st through the i th modulus operators are sequentially 

7 applied to the resulting summation to yield the final n th value of the candidate output 

8 matrix. The actual output pseudo-random numbers for that iteration of the generator are 

9 then taken from the candidate output matrix. In order to assure the uniformity of the 

1 0 distribution of the actual output values, certain results of the modulus operations may not 

1 1 be available for use as the pseudo-random number generator result; those intermediate 

1 2 results may or may not still be held in the historical sequence of candidate output matrix 

1 3 values X n for the calculation of subsequent candidate output matrix values. 
14 

1 5 The variable transition matrices Ai, n ... A k , n are determined by secondary pseudo-random 

1 6 number generators or other processes. For instance, a simple list of 1 00 possible values 

1 7 for Ai could be compiled and the variation in the sequence of Ai >n as n goes from 1 to 

18 100 would consist of selecting the next entry from the list. As the list is exhausted, the 

1 9 selection would return to the beginning of the list. Similar lists could be used for A 2 

20 through A k with each variation being chosen from the sequences in the lists. 

2 1 Advantageously, the number of items in the lists could be chosen to be relatively prime, 

22 that is, no count of items in any of the lists would share a common factor with another. 

23 The length of the composite sequence created by this combined sequence of lists would 

24 have a cycle length equal to the product of the number of items in each list. Thus, with k 

25 set equal to 4 and list lengths of 1 00, 1 0 1 , 1 03 and 1 07, the length of the cycle of 

26 combinations would equal 1 1 1 ,3 1 2, 1 00 before the pattern of combinations would begin 

27 to repeat. Instead of lists, each Ai >n ... A M could be determined by a secondary pseudo- 

28 random number generator with the cycle length of each pseudo-random number generator 

29 distinct from the others. The secondary pseudo-random number generators could be of 

30 virtually any form including the classical LCG or any of the variations mentioned above. 

3 1 With distinct, relatively prime cycle lengths, the length of the composite sequence created 
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1 by the combined sequence of secondary pseudo-random number generators would have a 

2 cycle length equal to the product of the separate cycle lengths. For example, with k set 

3 equal to 4 and secondary pseudo-random number generator cycle lengths of 7 15,999,98 1 , 

4 714,673,789, 700,943,927 and 687,956,333, the length of the cycle of combinations 

5 would equal 2.47 x 10 35 before the pattern of combinations would begin to repeat. 
6 

7 The variable augmentation matrices Bi, n ... B j)n are determined by secondary pseudo- 

8 random number generators or other processes. For instance, a simple list of 1 13 possible 

9 values for Bi could be compiled and the variation in the sequence of Bi, n as n goes from 1 

10 to 1 1 3 would consist of selecting the next entry from the list. As the list is exhausted, the 

1 1 selection would return to the beginning of the list. Similar lists could be used for B 2 

1 2 through Bj with each variation being chosen from the sequences in the lists. The number 

1 3 of items in the lists are ideally chosen to be relatively prime, that is, no count of items in 

14 any of the lists would share a common factor with another. The length of the composite 

1 5 sequence created by this combined sequence of lists would have a cycle length equal to 

1 6 the product of the number of items in each list. Thus, with j set equal to 4 and list lengths 

17 of 1 13, 109, 99 and 97, the length of the cycle of combinations would equal 1 18,280,151 

1 8 before the pattern of combinations would begin to repeat. Instead of lists, each Bi jn ... B j>n 

1 9 could be determined by a secondary pseudo-random number generator, ideally with the 

20 cycle length of each pseudo-random number generator distinct from the others including 

21 those of the transition matrices A. The secondary pseudo-random number generators 

22 could be of virtually any form including the classical LCG or any of the variations 

23 mentioned above. With distinct, relatively prime cycle lengths, the length of the 

24 composite sequence created by the combined sequence of secondary pseudo-random 

25 number generators would have a cycle length equal to the product of the separate cycle 

26 lengths. For example, with j set equal to 4 and secondary pseudo-random number 

27 generator cycle lengths of 42,517,061, 43,477,631, 37,533,169 and 34,824,227, the 

28 length of the cycle of combinations would equal 2.42 x 10 30 before the pattern of 

29 combinations would begin to repeat. 
30 
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1 Using secondary pseudo-random number generators for the transition matrices A and also 

2 for the augmentation matrices B with composite cycle lengths of 2.47 x 1 0 35 and 2.42 x 

3 1 0 30 would yield a primary MVRM process pseudo-random number generator with a 

4 cycle length of 5. 96 x 10 65 . 
5 

6 The modulus operators mi, n ... m i>n are determined by secondary pseudo-random number 

7 generators or other processes. For instance, a simple list of 71 possible values for mi 

8 could be compiled and the variation in the sequence of mi, n as n goes from 1 to 7 1 would 

9 consist of selecting the next entry from the list. As the list is exhausted, the selection 

10 would return to the beginning of the list. Similar lists could be used for m 2 through m\ 

1 1 with each variation being chosen from the sequences in the lists. The number of items in 

1 2 the lists are ideally chosen to be relatively prime, that is, no count of items in any of the 

1 3 lists would share a common factor with another. The length of the composite sequence 

14 created by this combined sequence of lists would have a cycle length equal to the product 

1 5 of the number of items in each list. Thus, with i set equal to 3 and list lengths of 7 1 , 67 

16 and 64, the length of the cycle of combinations would equal 304,448 before the pattern of 

1 7 combinations would begin to repeat. Instead of lists, each mi >n ... m i>n could be 

1 8 determined by a secondary pseudo-random number generator, advantageously with the 

1 9 cycle length of each pseudo-random number generator distinct from the others including 

20 those of the transition matrices A and of the augmentation matrices B. The secondary 

2 1 pseudo-random number generators could be of virtually any form including the classical 

22 LCG or any of the variations mentioned above. With distinct, relatively prime cycle 

23 lengths, the length of the composite sequence created by the combined sequence of 

24 secondary pseudo-random number generators would have a cycle length equal to the 

25 product of the separate cycle lengths. For example, with i set equal to 3 and secondary 

26 pseudo-random number generator cycle lengths of 7,337, 6,479 and 9,503, the length of 

27 the cycle of combinations would equal 4.52 x 1 0 1 1 before the pattern of combinations 

28 would begin to repeat. 
29 

30 Use of secondary pseudo-random number generators for the modulus operators with 

3 1 composite cycle lengths of 4.52 x 1 0 1 1 in addition to secondary pseudo-random number 
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1 generators for the transition matrices A and for the augmentation matrices B with 

2 composite cycle lengths of 2.47 x 10 35 and 2.42 x 10 30 , respectively, could yield a 

3 primary MVRM process pseudo-random number generator with a cycle length of 2.69 x 

4 1 0 77 . The cycle length of pseudo-random number generators with integrated varying 

5 modulus operators is difficult to evaluate since no theoretical basis for making such 

6 evaluation has yet been developed. However, because the system is composed of several 

7 independent elements each of which has quite long cycle lengths, the composite result 

8 could well be equivalent to the product of those cycle lengths leaving a very long 

9 resulting cycle length. 
10 

1 1 In order to assure the very long cycle lengths, an alternative form of the multiple variable 

1 2 recursive matrix (MVRM) pseudo-random number generator process of the invention 

13 could be used that has the form of X„= ((Ai >n X„.i + ... + A M X n . k + Bi,„ + ... + B j)n ) mod 

14 mi, n ) ... mod mi, n for the primary candidate output cycle component and the actual output 

1 5 values are generated through the multiple modulus operation Z n = (X n mod ri >n ) ... mod 

1 6 r g>n , that is, the n th actual output value is generated by applying multiple varying modulus 

1 7 operators to the n th value of the candidate output matrix. The initial modulus operators 

18 mi >n ... m i)n for the candidate output matrix could be chosen to accommodate the word- 

1 9 length constraints of the computer system and should advantageously be large prime 

20 numbers. 
21 

22 For either embodiment of the MVRM generator, the MVRM multiple modulus version or 

23 the alternative form described in the preceding paragraph, the modulus operators should 

24 ideally be chosen to be relatively prime to each other. The final modulus operator 

25 determines the range of the actual output values, e.g., choosing 256 as the final operator 

26 value creates a range of actual output values from 0 to 255. Other modulus operator 

27 values, whether chosen from lists, by secondary pseudo-random number generators, or 

28 by some other method, should fall into descending value order between the first operator 

29 (which should be the largest) and the final operator (which should be the smallest). All 

30 of the modulus operators should ideally be relatively prime to each other. Thus, if 256 
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1 were chosen as the final modulus operator, all of the other operators should be relatively 

2 prime odd numbers (to be relatively prime to 256 which is an even number). 
3 

4 In order to generate an equally and uniformly distributed set of actual output values, 

5 certain results from each of the modulus operation steps would have to be discarded 

6 according to the relationship of the modulus operators. For instance, if the value of mi jn 

7 mod m 2 , n was equal to 1 17, then 1 17 of the possible intermediate results would need to be 

8 discarded to assure the uniformity of the generated candidate or actual output 

9 distribution. Either the first 117, the final 1 17, or some arbitrary range of 1 17 of the 

10 possible intermediate output results could be discarded. To discard the first 117, the 

1 1 exclusion condition would be X n < 1 17; to discard the final 117, the exclusion condition 

12 would be X n >= mi 5 n - 1 17. The discarding process would be similarly applied to each 

1 3 subsequent set of modulus operations, e.g., m2,n mod m 3)n , m 3jn mod m4,n ... mi-i,n mod 

1 4 m i>n? where m^ is the final modulus operator. 
15 

1 6 Another variation of the multiple modulus process would be to calculate X n = ((A\ n X n -i 

17 + ... + A x M X n -k + B\ n + ... + B x j, n ) mod m\ n ) ... mod m\ n for the first primary 

18 candidate output cycle component and Y n = ((A y i, n Y n -i + ... + A y k , n Y n -k + B% + ••• + 

19 B y jjn ) mod m y i 9 n) ... mod m y i >n for the second primary candidate output cycle component 

20 and the actual output values would be generated through multiple modulus operations 

21 applied to the sum of X n and Y n as Z n = ((X„ + Y„) mod m z i, n ) ... mod m\ n . 
22 

23 The process of the MVRM pseudo-random number generator could also be specified to 

24 assure that each candidate output value matrix of the form of X n = ((Ai >n X n -i + ... + 

25 A kj nX n -k + Bi >n + ... + Bj, n ) mod mi >n ) ... mod m ijn was a non-invertible matrix. This 

26 characteristic could be introduced by appropriate modification of the final augmentation 

27 matrix component Bj, n to assure that the candidate output value matrix X n was non- 
28 invertible. Were each of the candidate output value matrices non-invertible, then the 

29 multiplicative components created by the transition matrices (e. g., Ai >n X n -i) would also 

30 be non-invertible regardless of the invertibility of the transition matrices A. However, 
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1 the transition and augmentation matrices may themselves be non-invertible as 

2 contributing components of the resulting candidate output value matrix. 
3 

4 All of the elements or only part of the elements of the candidate output value matrix X n 

5 could be used as the actual output values of the pseudo-random number generator. Any 

6 remaining elements that are not used as pseudo-random number generator actual output 

7 values could be stored in the storage register and still contribute to the determination of 

8 subsequent candidate output value matrix results. 
9 

1 0 The MVRM pseudo-random number generator claimed herein incorporates several 

1 1 components, each of which has distinct effects on the overall cycle length of the pseudo- 

12 random number generator process. In general, the use of long-cycle secondary pseudo- 

13 random number generators to determine the values of the transition matrices, 

14 augmentation matrices, and modulus operators should contribute to MVRM pseudo- 

1 5 random number generator cycles that are exceedingly long. The cycle length of pseudo- 

16 random number generators of the MVRM type is difficult to evaluate since no theoretical 

1 7 basis for making such evaluation has yet been developed. However, because the system 

1 8 is composed of several independent elements each of which has quite long cycle lengths, 

19 the composite result should be equivalent to the product of those cycle lengths leaving a 

20 very long resulting combined cycle length. 
21 

22 An advantage of the present invention is that it presents a new unified framework for 

23 incorporating a large number of options into the pseudo-random number generator 

24 process creating nearly innumerable sets of alternative pseudo-random number 

25 sequences. 
26 

27 

28 BRIEF DESCRIPTION OF THE DRAWINGS 
29 

30 FIG. 1 is a block diagram depicting the functional components of a MVRM pseudo- 

3 1 random number generator, according to the invention claimed herein. 

12 



1 

2 FIG. 2 is a block diagram depicting a general implementation of functional components 

3 of the MVRM pseudo-random number generator, according to the invention claimed 

4 herein. 
5 

6 FIG. 3 is a block diagram depicting the functional components of a MVRM pseudo- 

7 random number generator with both primary and secondary variable modulus reductions, 

8 according to the invention claimed herein. 
9 

10 FIG. 4 is a block diagram depicting a general implementation of functional components 

1 1 of the MVRM pseudo-random number generator with both primary and secondary 

1 2 variable modulus reductions, according to the invention claimed herein. 
13 

14 FIG. 5 is a block diagram depicting an implementation of the uniform variable modular 

1 5 reduction functional component of the MVRM pseudo-random number generator 

1 6 converting the intermediate output matrix X te mp to a uniformly distributed primary 

1 7 candidate output value matrix X„, according to the invention claimed herein. 
18 

1 9 FIG. 6 is a block diagram depicting an implementation of the uniform variable modular 

20 reduction functional component of the MVRM pseudo-random number generator 

2 1 converting the primary candidate output value matrix X n to a uniformly distributed 

22 secondary candidate output value matrix Z n , according to the invention claimed herein. 

23 

24 FIG. 7 is a block diagram depicting a dual-sequence implementation of the MVRM 

25 pseudo-random number generator of the claimed invention, with a single variable 

26 modular reduction component. 
27 

28 FIG. 8 is a block diagram depicting an implementation of the MVRM pseudo-random 

29 number generator of the claimed invention, including an invertibility evaluation module 

30 for the creation of non-invertible candidate output value matrices. 
31 



13 



1 

2 DESCRIPTION OF THE PREFERRED EMBODIMENT 

3 

4 Referring to FIG. 1 , a block diagram of the pseudo-random number generator system of 

5 the claimed invention is shown which incorporates a transition and augmentation 

6 summation process 1 1 , a storage register 12 for initial and previously generated values of 

7 the primary candidate output matrix sequence X n 3, a variable modular reduction process 

8 13, a list or other process 14 for creating a value for transition matrix A|,„, a list or other 

9 process 1 5 for creating values for all other transition matrices through A k , n , a list or other 

10 process 16 for creating a value for augmentation matrix Bi >n , a list or other process 17 for 

1 1 creating values for all other augmentation matrices through Bj, n , a list or other process 1 8 

12 for creating a value for modulus operator mi >n , and a list or other process 19 for creating 

1 3 values for all other modulus operators through m i>n . The values of the transition matrices 

14 A M 24 through A k , n 25 and of the augmentation matrices Bi, n 26 through Bj, n 27 along 

1 5 with the previously created or initial values of the primary candidate output matrices X n 3 

16 from the storage register 12 are provided to the transition and augmentation summation 

17 process 1 1 where they are aggregated through matrix multiplication and addition 

1 8 operations to create an intermediate value of the primary candidate output matrix shown 

1 9 as Xtemp 2. The intermediate value X, em p 2 is then sent to the variable modular reduction 

20 process 1 3 where the modulus operators m u „ 28 through m i; n 29 are applied and resulting 

2 1 values evaluated for retention or removal to generate the primary candidate output matrix 

22 sequence X n 3. The actual output values of the pseudo-random number generator X out 1 

23 are composed of all or some of the elements of the primary candidate output matrix X n 3 . 

24 Any remaining elements from the primary candidate output matrix X n 3 that are not used 

25 as pseudo-random number generator actual output values X out 1 could be stored in the 

26 storage register 12 and still contribute to the determination of subsequent primary 

27 candidate output matrix results. 
28 

29 In FIG. 2, one embodiment of the general pseudo-random number generator system of 

30 the invention is shown. The system shown in FIG. 2 details the transition and 

3 1 augmentation summation process 2 1 of the invention with the particular form X, e m P = 

14 



1 Ai } nX n -i + ... + Ak >n X n -k + Bi, n + ... + Bj 3 n using the transition matrices A\ >tl 24 through Ak >n 

2 25, the augmentation matrices Bi jn 26 through Bj jtl 27, and the previously created or initial 

3 values of the primary candidate output matrices X n -i through X n -k from the storage 

4 register 12. The intermediate value X te mp 2 is then sent to the variable modular reduction 

5 process 23 with the form X n = ((X tem p) mod mi jn ) ... mod where the modulus 

6 operators mi n through m^n are applied and resulting values evaluated for retention or 

7 removal to generate the primary candidate output matrix sequence X n 3. The 

8 retention/removal component of the variable modular reduction process when used to 

9 create uniformly distributed values is shown in more detail in FIG. 5. 
10 

1 1 The actual output values X out 1 of the pseudo-random number generator are composed of 

12 all or some of the elements of the primary candidate output matrix X n 3. Any remaining 

1 3 elements from the primary candidate output matrix X n 3 that are not used as pseudo- 

14 random number generator actual output values X ou t 1 could be stored in the storage 

1 5 register 12 and still contribute to the determination of subsequent primary candidate 

16 output matrix results. The values for the transition matrices Ai >n 24 through A k , n 25 are 

1 7 created by secondary pseudo-random number generators, are taken from pre-determined 

1 8 lists, or are created by other processes before being sent to the transition and 

1 9 augmentation summation process 2 1 . The values for the augmentation matrices B \ >n 26 

20 through Bj >n 27 are created by secondary pseudo-random number generators, are taken 

21 from pre-determined lists, or are created by other processes before being sent to the 

22 transition and augmentation summation process 21. The values for the modulus 

23 operators mi, n 28 through m^n 29 are created by secondary pseudo-random number 

24 generators, are taken from pre-determined lists, or are created by other processes before 

25 being sent to the variable modular reduction process 23. 
26 

27 In FIG. 3, an alternative embodiment of an implementation of the general pseudo-random 

28 number generator system of the invention is shown. The system shown in FIG. 3 

29 includes both primary variable modular reduction 31 and secondary variable modular 

30 reduction 32 components. As in the implementation shown in FIG.l, the process 

3 1 incorporates a transition and augmentation summation process 1 1 ; a storage register 12 
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1 for initial and previously generated values of the primary candidate output matrix 

2 sequence X n 3; a primary variable modular reduction process 3 1 ; lists or other processes 

3 for creating transition matrices Ai jn 14 through A M 15; lists or other processes for 

4 creating augmentation matrices Bi jn 16 through Bj >n 17; and lists or other processes for 

5 creating modulus operators mi jn 18 through m i} n 19. The transition and augmentation 

6 summation process 1 1 creates an intermediate value of the primary candidate output 

7 matrix X te mp 2. The intermediate value X te mp 2 is then sent to the primary variable 

8 modular reduction process 3 1 where the modulus operators mi, n 1 8 through m Kn 1 9 are 

9 applied and resulting values evaluated for retention or removal to generate the primary 

10 candidate output matrix sequence X n 3. The primary candidate output matrix sequence 

11 X n 3 is then sent to the secondary variable modular reduction process 32 where the 

1 2 modulus operators Y\ >n 38 through r g , n 39 are applied and resulting values evaluated for 

1 3 retention or removal to generate the secondary candidate output matrix sequence Z n 33. 

14 The actual output values of the pseudo-random number generator X ou t 1 are composed of 

1 5 all or some of the elements of the secondary candidate output matrix Z n 33. The primary 

1 6 variable modular reduction process 3 1 may be implemented as a uniform variable 

17 modular reduction functional component as shown in FIG. 5 converting the intermediate 

1 8 output matrix X te m P 2 to a uniformly distributed primary candidate output value matrix 

19 X n 3. Similarly, the secondary variable modular reduction process 32 may be 

20 implemented as a uniform variable modular reduction functional component as shown in 

21 FIG. 6 converting the primary candidate output value matrix X n 3 to a uniformly 

22 distributed secondary candidate output value matrix Z n 33. 
23 

24 In FIG. 4, one embodiment of the alternative implementation of FIG 3. is shown. As in 

25 the embodiment of FIG 2., the transition and augmentation summation process 21 of the 

26 invention takes the form X te m P = Ai }n X n -i + ... + A M X n -k + Bi, n + ... + Bj, n using the 

27 transition matrices Ai >n 24 through A M 25, the augmentation matrices B^n 26 through Bj, n 

28 27, and the previously created or initial values of the primary candidate output matrices 

29 X n -i through X n -k from the storage register 12. The intermediate value X te mp 2 is then sent 

30 to the primary variable modular reduction component 41 with the form X n = ((X te m P ) mod 

3 1 mi, n ) mod m ijn to generate the candidate output matrix X n 3. Resulting values of the 
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1 candidate output matrix X n 3 are evaluated for retention or removal prior to storage in the 

2 storage register 12 to generate subsequent iterations of the primary candidate output 

3 matrix 3, The primary candidate output matrix X n 3 also is sent to the secondary variable 

4 modular reduction process 42 with the form Z n = ((X n ) mod ri >n ) ... mod r g>n where the 

5 modulus operators ri, n 48 through r g>n 49 are applied and resulting values evaluated for 

6 retention or removal to generate the secondary candidate output matrix Z n 33. The actual 

7 output values of the pseudo-random number generator X ou t 1 are composed of all or some 

8 of the elements of the secondary candidate output matrix Z n 33. Any remaining elements 

9 from the secondary candidate output matrix Z n 33 that are not used as pseudo-random 

10 number generator actual output values X ou t 1 are discarded. As in the embodiment of 

1 1 FIG 2., the values for the transition matrices Ai >n 24 through Ak, n 25 are created by 

12 secondary pseudo-random number generators, are taken from pre-determined lists, or are 

1 3 created by other processes before being sent to the transition and augmentation 

14 summation process 2 1 . The values for the augmentation matrices Bi f „ 26 through B jjn 27 

1 5 are created by secondary pseudo-random number generators, are taken from pre- 

16 determined lists, or are created by other processes before being sent to the transition and 

1 7 augmentation summation process 21 . The values for the modulus operators mi >n 28 

1 8 through m ijn 29 are created by secondary pseudo-random number generators, are taken 

19 from pre-determined lists, or are created by other processes before being sent to the 

20 primary variable modular reduction process 41 . The values for the modulus operators ri jn 

2 1 48 through r g>n 49 are created by secondary pseudo-random number generators, are taken 

22 from pre-determined lists, or are created by other processes before being sent to the 

23 secondary variable modular reduction process 42. 
24 

25 In FIG. 5, the retention and discarding procedures of the primary uniform variable 

26 modular reduction process are shown in detail. The intermediate value X te mp 2 is 

27 provided to the primary uniform variable modular reduction process 55. Each successive 

28 pair of modulus operators starting with mi, n 56 and m 2 , n 57 are used in the uniform 

29 variable modular processor 52 in the form X te mp2 = ((X te mp) mod mi,n) mod m 2 , n . The 

30 uniformity of the distribution of the possible values of X te mp2 over the range of 0 to (m 2 , n - 

31 1) is assured by discarding a certain number of candidate output values 53 from the 
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1 process. The number of values to be discarded is determined as mi >n mod m 2jn which 

2 would be a number greater than 0 if the modulus operators mi, n 56 and m 2 , n 57 were 

3 chosen to be relatively prime. The number of values to be discarded can be realized by 

4 discarding the first mi jn mod m 2 ,n elements of X tem p or by discarding the last mi jn mod m 2 , n 

5 elements of X te mp. The process is successively repeated by providing each intermediate 

6 value to the primary uniform variable modular processor 52 for each successive pair of 

7 modulus operators. For example, the next successive pair of modulus operators (m 2 , n and 

8 m 3) n) would be used in the uniform variable modular processor 52 in the form X temp 3 = 

9 ((X te mp2) mod m 2jI1 ) mod m 3} n. However, since X te mp2 was already created with the 

1 0 operation of mod m 2jn , the repetition of that step is unnecessary and simplifies to X te mp3 = 

1 1 (X t emp2) mod m3 5 n. As before, the uniformity of the distribution of the possible values of 

12 X temp 3 over the range of 0 to (m 3 , n - 1) is assured by discarding the number of values 

13 determined as m 2jn mod m 3 , n . The process is successively repeated by providing each 

14 intermediate value to the uniform variable modular processor 52 for each successive pair 

1 5 of modulus operators until the final set of mj.i, n 58 and m ijn 59 are used. In the final step, 

1 6 the uniform variable modular processor 52 has the form X tem pi = ((X te mpi-i) mod mj.^n) 

1 7 mod m ijn which again simplifies to X tem pi = (X te mpi-i) mod m^. The uniformity of the 

1 8 distribution of the possible values of X te mpi over the range of 0 to (m i}n - 1) is assured by 

19 discarding a certain number of primary candidate output values 53 from the process. The 

20 number of values to be discarded is determined as m^^ mod m ijtl which is greater than 0 

21 since m^ }n 58 and m i>n 59 are relatively prime. The appropriate number of values to be 

22 discarded can be realized by discarding the first m^n mod m i)n elements of X te mpi-i or by 

23 discarding the last mj-i jn mod m ijn elements of X te mpi-i. The values of X te mpi in the final 

24 step are sent to the primary candidate output matrix X n 50 as the results of the primary 

25 uniform variable modular reduction process 55. 
26 

27 In FIG. 6, the retention and discarding procedures of the secondary uniform variable 

28 modular reduction process are shown in detail. The primary candidate output matrix X n 3 

29 is provided to the secondary uniform variable modular reduction process 65. Each 

30 successive pair of modulus operators starting with ri, n 66 and r 2?n 67 are used in the 

3 1 uniform variable modular processor 62 in the form X seC ondary2 = ((X n ) mod ri, n ) mod r 2>n . 
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1 The uniformity of the distribution of the possible values of X se condary2 over the range of 0 

2 to (r 2 , n - 1) is assured by discarding a certain number of candidate output values 63 from 

3 the process. The number of values to be discarded is determined as ri >n mod r 2 , n which 

4 should be a number greater than 0 since r u 66 and r 2 , n 67 are relatively prime. The 

5 number of values to be discarded can be realized by discarding the first ri >n mod r 2 , n 

6 elements of X seC ondary or by discarding the last rj ?n mod r 2?n elements of X seC ondary. The 

7 process is successively repeated by providing each intermediate value to the secondary 

8 uniform variable modular processor 62 for each successive pair of modulus operators. 

9 For example, the next successive pair of modulus operators (r 2j n and r 3)n ) would be used in 

1 0 the uniform variable modular processor 62 in the form X seC ondary3 = ((X se condary2) mod r 2>n ) 

1 1 mod r 3j n. However, since X seC ondary2 was already created with the operation of mod r 2>n , 

12 the repetition of that step is unnecessary and simplifies to X se condary3 = (X se condary2) mod 

13 r 3>n . As before, the uniformity of the distribution of the possible values of X seC ondary3 over 

14 the range of 0 to (r 3>n - 1) is assured by discarding the number of values determined as r 2 , n 

1 5 mod r 3 , n . The process is successively repeated by providing each intermediate value to 

16 the uniform variable modular processor 62 for each successive pair of modulus operators 

1 7 until the final set of r g _i jn 68 and r g , n 69 are used. In the final step, the uniform variable 

1 8 modular processor 62 has the form X sec ondaryg = ((X seC ondaryg-i) mod r g .i, n ) mod r g , n which 

1 9 again simplifies to X se condaryg = (X se condaryg-i) mod r g , n . The uniformity of the distribution 

20 of the possible values of X seC ondaryg over the range of 0 to (r g>n - 1) is assured by discarding 

21 a certain number of secondary candidate output values 63 from the process. The number 

22 of values to be discarded is determined as r g . 1)n mod r gjn which is greater than 0 since 

23 r g .i ( n 68 and r gj n 69 are relatively prime. The appropriate number of values to be 

24 discarded can be realized by discarding the first r g -i, n mod r g>n elements of X se condaryg-i or 

25 by discarding the last r g _i 5 n mod r gjn elements of X se condaryg-i. The values of X se condaryg in 

26 the final step are sent to the secondary candidate output matrix Z n 60 as the results of the 

27 secondary uniform variable modular reduction process 65. The actual output values of 

28 the pseudo-random number generator X ou t 1 are composed of all or some of the elements 

29 of the secondary candidate output matrix Z n 60. 
30 
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1 In FIG. 7, another alternative implementation of the general pseudo-random number 

2 generator system of the invention that includes two (or more) independent MVRM 

3 modules 71, 72 and a separate uniform variable modular reduction component 76 is 

4 shown in detail. Each of the independent MVRM modules 71, 72 operates as in the 

5 general version with the transition and augmentation summation process 1 1 , the 

6 previously created values from the storage register 12, and the variable modular reduction 

7 process 13 creating the candidate output values X n 73 or Y n 74. The variable modular 

8 reduction process 76 accepts the independent candidate output values X n 73 and Y n 74 

9 along with the variable modulus operators m\ n 77 through m Z j jn 78 to create the 

1 0 candidate output matrix Z n 70 of the alternative implementation of the pseudo-random 

1 1 number generator. The specific actual output values X ou t 1 are composed of all or some 

1 2 of the elements of the variable modulus candidate output matrix Z n 70. The values for 

1 3 the modulus operators m z i jn 77 through m Z j jn 78 are created by secondary pseudo-random 

14 number generators, are taken from pre-determined lists, or are created by other processes 

1 5 before being sent to the variable modular reduction process 76. 
16 

1 7 FIG. 8 portrays a particular embodiment of the general pseudo-random number generator 

1 8 system of the invention that includes a component assuring that the candidate output 

19 matrix X n 80 cannot be inverted. FIG. 8 shows essentially the same system that was 

20 shown in FIG. 2 including details of the transition and augmentation summation process 

21 21 with the form Xtemp^ Ai >n X n -i + ... + A k , n X n -k + B u + ... + Bj, n using the transition 

22 matrices Ai, n 24 through A k9 n 25, the augmentation matrices Bi, n 26 through Bj, n 82, and 

23 the previously created or initial values of the primary candidate output matrices X n -i 

24 through X n . k from the storage register 12. However, unlike the system previously shown 

25 in FIG. 2, the non-invertible version of FIG. 8 includes an invertibility evaluation module 

26 81 that evaluates the final augmentation matrix Bj, n 82 and makes adjustments based on 

27 the characteristics of X te mp 2 not including B j>n 82 to assure that the result of the transition 

28 and augmentation summation process 21 yields a matrix that cannot be inverted. That 

29 non-invertible intermediate value of X te mp 2 is then sent to the variable modular reduction 

30 process 23 with the form X n = ((X temp ) mod mi,„) ... mod m j3 n where the modulus 

3 1 operators mi, n 28 through m jjn 29 are applied to generate the primary non-invertible 



20 



1 candidate output matrix sequence X n 80. For uniform variable modular reduction the 

2 retention/removal component of the process was shown in more detail in FIG. 5. The 

3 actual output values of the pseudo-random number generator X ou t 1 are composed of all 

4 or some of the elements of the primary non-invertible candidate output matrix X n 80. 

5 Any remaining elements from the primary non-invertible candidate output matrix X n 80 

6 that are not used as pseudo-random number generator actual output values X ou t 1 could be 

7 stored in the storage register 12 and still contribute to the determination of subsequent 

8 primary non-invertible candidate output matrix results. The values for the transition 

9 matrices A\ >n 24 through Ak, n 25 are created by secondary pseudo-random number 

1 0 generators, are taken from pre-determined lists, or are created by other processes before 

1 1 being sent to the transition and augmentation summation process 21 . The values for the 

12 augmentation matrices Bi, n 26 through Bj >n 82 are created by secondary pseudo-random 

13 number generators, are taken from pre-determined lists, or are created by other processes 

14 before being sent to the transition and augmentation summation process 21 except that 

1 5 the final augmentation value of Bj, n 82 is evaluated and adjusted by the invertibility 

16 evaluation module 81 to assure that the intermediate output matrix X te mp 2 cannot be 

17 inverted. The values for the modulus operators mi >n 28 through mj >n 29 are created by 

1 8 secondary pseudo-random number generators, are taken from pre-determined lists, or are 

1 9 created by other processes before being sent to the uniform variable modular reduction 

20 process 23. 
21 

22 Although the present invention has been described in terms of the presently preferred 

23 embodiment, it is to be understood that such disclosure is purely illustrative and is not to 

24 be interpreted as limiting. Consequently, without departing from the spirit and scope of 

25 the invention, various alterations, modifications, and/or alternative applications of the 

26 invention will, no doubt, be suggested to those skilled in the art after having read the 

27 preceding disclosure. Accordingly, it is intended that the following claims be interpreted 

28 as encompassing all alterations, modifications, or alternative applications as fall within 

29 the true spirit and scope of the invention. 
30 
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